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I. REAL PARTY IN INTEREST 

The real party in interest is MasterCard International Incorporated, the assignee of 
the entire right, tide, and interest in the present application. 
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II. RELATED APPEALS AND INTERFERENCES 

None. 
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III. STATUS OF CLAIMS 

Claims 1-5 stand rejected by the Examiner and are the subject of this appeal. 
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IV. STATUS OF AMENDMENTS 

No amendments have been filed subsequent to the final rejection. 
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V, SUMMARY OF CLAIMED SUBJECT MATTER 
A. Independent Claim 1 

Independent claim 1 is directed to a method for conducting a transaction of a certain 
amount over a communications network between parties including a consumer with a payment 
account number (PAN) and a merchant computer. (See Figure 2; and page 9, Ins. 4-7). The PAN 
number is issued to the consumer by an issuer, which is a financial institution that establishes an 
account for the consumer, and that may also issue to the consumer a payment card. (See page 3, Ins. 
5-6). The method also involves a payment system that is accessible through a payment gateway, and 
that includes an issuer's computer and a merchant's acquirer computer. (See Figure 2; and page 9, 
Ins. 7-9). The merchant's acquirer computer is operated by an acquirer, which is a financial 
institution that establishes an account with the merchant, and that processes authorizations and 
payments. (See page 3, Ins. 10-17). The payment gateway is a device that processes merchant 
payment messages, including payment instructions. (See id.). The payment gateway is operated by 
either the acquirer or a designated third party. (See id). 

The method of claim 1 comprises generating a first message authorization request 
and forwarding it to the payment gateway. (See page 9, Ins. 10-11; and page 16, Ins. 27-28). The 
method further comprises authenticating the parties by the gateway and returning to the merchant's 
computer an automatic authorization approval without first obtaining authorization from the issuer. 
(See page 9, Ins. 11-13; page 12, Ins. 20-24; page 16, Ins. 29-30; and page 17, Ins. 1-6). Additionally, 
the method comprises generating, based upon the authentication and the automatic authorization 
approval, a second authorization request for authorizing the transaction using the PAN. (See page 9, 
Ins. 11-13; and page 17, Ins. 1-10). Futhermore, the method comprises forwarding the request, not 
to the payment gateway, but to the payment system. (See id). Finally, the method comprises 
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authorizing or declining the second request at least based on the PAN and the amount of the 
transaction. (See page 9, Ins. 11-13; and page 17, Ins. 11-12). 
B. Independent Claim 4 

Independent claim 4 is directed to a method for conducting a transaction over a 
communications network between a consumer with a payment account number (PAN) issued by an 
issuer, and a merchant computer. (See Figure 2; and page 9, Ins. 4-7). The method also involves the 
consumer having a consumer computer for conducting the transaction over the network with the 
merchant computer. (See Figure 2; and page 11, Ins. 10-13). In addition, the method involves a 
payment gateway for accessing a payment system, the payment system including an acquirer 
computer associated with the merchant, and an issuer computer associated with the issuer. (See 
Figure 2; page 9, Ins. 4-9; and page 12, Ins. 4-7). 

The method of claim 4 comprises generating, by the consumer's computer, a 
message authorization request. (See Figure 2; and page 11, In. 21 - p. 12, In. 2). The method further 
comprises packaging the message authorization request with a merchant's message authorization 
request (see page 12, Ins. 4-7; and p. 16, Ins. 27-28), and encrypting the merchant authorization 
request (see id). In addition, the method comprises forwarding the encrypted merchant's 
authorization request to the payment gateway, decrypting, by the payment gateway, the merchant 
authorization request, and authenticating the consumer and the merchant. (See page 7, line 19 - page 
8, line 3; and p. 16, Ins. 27-30). The method also comprises returning a message with an automatic 
authorization approval and the consumer's encrypted PAN to the merchant's computer, but 
returning the message without first obtaining authorization through the payment system. (See page 
12, Ins. 20-24; and page 17, Ins. 1-6). Futhermore, the method comprises opening the returned 
message to obtain the PAN, and forwarding a payment authorization request using the PAN to the 
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payment system. (See page 17 Ins. 4-10). Finally, the method comprises providing, by said acquirer 
computer, an authomation or decline of the payment authorization request (See page 17, Ins. 11-12). 
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VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

Claims 1-5 stand rejected under 35 U.S.C. § 103(a) as being allegedly unpatentable 
over U.S. Patent No. 6,327,578, to Linehan et al. ("Linehan"), in view of U.S. Patent No. 6,078,902 
to Schenkler ("Schenkler"). 
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VII. ARGUMENT 

The Examiner has rejected claims 1 through 5 of the present application as being 
obvious over Linehan in view of Schenkler. 

A. Argument for Independent Claim 1 

Independent claim 1 requires, among other things, the step of "authenticating said 
parties by said gateway and returning to said merchant's computer an automatic authorization 
approval without first obtaining authorization from said issuer" (Emphasis supplied). Linehan 
does not disclose or suggest this limitation. Rather, in Linehan an authorization token is returned to 
the merchant's computer only after the transaction has been authorized by the issuer computer. 

In Linehan the consumer's computer generates a message - which includes consumer 
identity and authentication information, the merchant's digital signature, and the digital certificate of 
the acquiring bank - and sends this message to the issuer gateway. See Linehan, Col. 4, Ins. 10-15. 
The issuer gateway then (i) verifies the merchant's digital signature; (ii) validates both the merchant's 
certificate and the acquirer's certificate, (iii) verifies that the consumer's account is active and 
sufficiently funded; (iv) pre-authorizes the payment using an authorization token; and (v) either 
sends the authorization token directly to the merchant, or sends it to the consumer who then 
forwards it to the merchant. See Linehan, Col. 4, Ins. 15-47. 

In sum, Linehan discloses that an authorization token is sent to the merchant only 
after the issuer has authorized the transaction. Linehan simply does not disclose or suggest the 
requirement of independent claim 1 that an authorization approval be returned to the merchant 
without first obtaining authorization from the issuer. 

The Examiner, citing Col. 3, Ins. 1-67 of Linehan, argues that Linehan discloses that 
"the payment gateway re turn [s] to the merchants computer approval without first obtaining 
authorization from the issuer." See Final Office Action, 6/2/04, at p. 2. The Examiner, however, is 
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simply incorrect. In the portion of Linehan cited by the Examiner, a consumer's payment request is 
first forwarded to the acquirer gateway 106, and then passed by the acquirer gateway 106 to the 
issuer bank 112 for authorization. See Linehan, Col 3, Ins. 25-32. In Linehan, if the consumer's 
payment request is authorized by the issuing bank 112, the issuing bank 112 sends its authorization 
approval to the acquirer gateway 106. See Linehan, Col. 3, Ins. 32-36. The acquirer gateway 106 then 
forwards the authorization approval to the merchant. See id. Neither the portion of Linehan cited 
by the Examiner, nor any other portion of Linehan for that matter, discloses or suggests that the 
authorization approval must be returned to the merchant's computer without first obtaining 
approval from the issuer, as required by independent claim 1, 

Nor does Schenkler cure these deficiencies in Linehan. Schenkler discloses that an 
authorization approval is sent to the merchant only after the clearing office, which, according to Col. 
9, Ins. 17-25 of Schenckler, is the user's bank, i.e., the issuer bank, has (i) verified the user's (i.e., 
consumer's) identification code and password, and (ii) compared the balance of the user's "wallet" 
with the cost data to ensure that the user has sufficient funds to complete the transaction. See 
Schenkler, Col. 10, Ins. 3-25. In Schenkler, once these authorization procedures have been 
completed by the clearing office - which is the issuer bank — a transaction validity code ("SC") is 
transmitted from the clearing office to the user. The SC "attests that the clearing office has affirmed 
the transaction." Schenckler at Col. 4, Ins. 21-23. Only after this "cryptographic secured session 
between the user and clearing office" has been completed, does the user transfer the SC to the 
vendor. Id. at Col. 10, Ins. 33-36. 

Thus, Schenkler discloses that transmission of the authorization message to the 
vendor only after the issuer bank has authorized the transaction. Schenkler does not disclose the 
requirement of independent claim 1, that an authorization approval be returned to the merchant's 
computer without first obtaining approval from the issuer. 
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In an Advisory Action mailed October 13, 2004, the Examiner alleges that Figure 7 
of Schenkler, and its corresponding description in the specification, disclose that "authorization 
approval be returned to the merchant's computer by the payment gateway without first obtaining 
authorization from the issuer." Again the Examiner is incorrect. Figure 7 of Schenkler illustrates 
the operation of a secured session between the vendor and the clearing office. See Schenkler, Col. 10, 
Ins. 38-41. The secured session between the vendor and the clearing office takes place after xht 
issuer (i.e. clearing office) has already transmitted to the user the SC authorizing the transaction, and 
the user has in turn transmitted the SC to the vendor. See id. at Col. 10, Ins. 45-49. Thus, neither the 
portion of Schenkler cited by the Examiner, nor any other portion of Schenkler, cures the 
deficiencies of Linehan with respect to independent claim \. 

For at least these reasons, the combination of Linehan and Schenkler fails to disclose 
or suggest the limitation of independent claim 1, that an automatic authorization approval be sent to 
the merchant's computer without first obtaining authorization from the issuer. The Examiner's 
rejection of independent claim 1 should therefore be withdrawn. 

B. Argument for Dependent Claims 2 and 3 

Since claims 2 and 3 both depend from, and contain all of the limitations of, 
independent claim 1, claims 2 and 3 should be allowed for the same reasons that were previously set 
forth in connection with independent claim 1 . 

C. Argument for Independent Claim 4 

Independent claim 4 requires, among other things, returning to the merchant's 
computer a message with an automatic authorization approval without first obtaining authorization 
through the payment system. 

The payment system of claim 4 includes an acquirer computer associated with the 
merchant and an issuer computer associated with the issuer. As stated above, Linehan discloses that 
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the authorization approval is first performed by the payment system (i.e., the issuer computer). In 
Schenkler, the authorization approval is generated by the clearing office (i.e., the issuer bank). Thus, 
for the same reasons set forth above in connection with claim 1, Linehan, alone or in combination 
with Schenkler, fails to disclose or suggest that the authorization approval is sent to the merchant 
computer by the payment gateway without first obtaining authorization from the payment system, as 
required by independent claim 4. 

D. Argument for Dependent Claims 5 

Since claim 5 depends from, and contains all of the limitations of, independent claim 
4, claim 5 should be allowed for the same reasons that were previously set forth in connection with 
independent claim 4. 

Respectfully submitted, 
Dated: j 

lobert C. Scheinf^ld 
PTO Reg. No. 31,300 

Attorney for Appellants 
Baker Botts L.L.P. 
30 Rockefeller Plaza 
New York, NY 10112 
Telephone: (212) 408-2512 
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VIL CLAIMS APPENDIX 

1 . A method for conducting a transaction of a certain amount over a communications 
network between parties to a transaction including a consumer with a payment account number 
(PAN) and a merchant computer, said number being issued by an issuer, and involving a payment 
system including a merchant's acquirer computer and an issuer computer associated with said issuer, 
said payment system being accessible through a payment gateway, said method comprising: 

generating a first message authorization request and forwarding said request to said 
payment gateway; 

authenticating said parties by said gateway and returning to said merchant's computer 
an automatic authorization approval without first obtaining authorization from said issuer; 

based upon said authentication and said automatic authorization approval, generating 
a second authorization request for authorizing said transaction using said PAN; 

forwarding said request not to said payment gateway but to said payment system; and 

authorizing or declining said second request at least based on said PAN and said 
amount of said transaction. 

2. The method of claim 1 wherein said first message authorization request is formatted 
in compliance with a first certain protocol and said second authorization request is a formatted by 
said merchant computer in compliance with a second certain protocol. 
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3. The method of claim 2 wherein said first certain protocol is a SET protocol and the 
second certain protocol is a SSL protocol; and wherein said payment gateway is a SET payment 
gateway. 

4. A method for conducting a transaction over a communications network between a 
consumer with a payment account number (PAN) issued by an issuer and a merchant computer, said 
consumer having a consumer computer for conducting the transaction over the network with said 
merchant computer, and including a payment gateway for accessing a payment system, said payment 
system including an acquirer computer associated with said merchant and an issuer computer 
associated with said issuer, the method comprising: 

generating by said consumer's computer a message authorization request; 
packaging said message authorization request with a merchant's message 
authorization request; 

encrypting said merchant authorization request; 

forwarding said encrypted merchant's authorization request to said payment gateway; 

decrypting by said payment gateway said merchant authorization request and 
authenticating the consumer and the merchant; 

returning a message to said merchant's computer with an automatic authorization 
approval and said consumer's encrypted PAN without first obtaining authorization through said 
payment system; 

opening said returned message to obtain said PAN; 

forwarding a payment authorization request using said PAN to said payment system; 

and 
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providing by said acquirer computer an authorization or decline of said payment 
authorization request. 

5. The method of claim 4 wherein said payment system is not accessed through said 
payment gateway. 
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IX. EVIDENCE APPENDIX 


No evidence has been submitted pursuant to 37 C.F.R. §§ 1.130, 1.131, or 1.132, or 
entered by the Examiner. 
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RELATED PROCEEDINGS APPENDIX 

None. 
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